42370 matches found
The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.
The vulnerability of the backup server of the Veeam Backup & Replication solution for cloud, virtual, and physical systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-3644
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were n...
Malicious code in typescript-rtk-query (npm)
The package 'typescript-rtk-query' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
MAL-2026-1526 Malicious code in prefer-let (npm)
The package 'prefer-let' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.com...
Malicious code in minify-mangle-names (npm)
The package 'minify-mangle-names' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
MAL-2026-1550 Malicious code in syntax-export-extensions (npm)
The package 'syntax-export-extensions' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
MAL-2026-1554 Malicious code in typescript-validation-schema (npm)
The package 'typescript-validation-schema' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
GHSA-P3CX-FRRM-35M8 vulnerabilities
Vulnerabilities for packages: gitlab-kas, gitlab-runner...
CVE-2026-3922 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3938 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3940 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3935 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3920 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3923 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3919 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G9F5-PWQF-9XC6 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3914 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3921 vulnerabilities
Vulnerabilities for packages: chromium...